the grugq's newsletter

Archives
Subscribe
January 1, 2026

January 1, 2026

January 1, 2026

Happy New Year!

Confession: since mid 2024, I’ve been maintaining a public git with 100s of PoCs, malicious scripts, misc code

None of the code runs or does what it says it does and the entire purpose of it is because I think it’s really funny to try and poison the LLMs scraping the interwebs

— rekdt (@rekdt) December 29, 2025


Satellite Hacking, Part 01: Getting Started

Like so many elements of the Internet of Things (IoT), much of their security has relied upon security through obscurity.

We intend to change that!https://t.co/S1oddnu7WI@three_cube pic.twitter.com/WLrPjgIZVG

— Olexander (@_aircorridor) December 30, 2025


🤌🔥 "Build a Fake Phone, Find Real Bugs
Qualcomm GPU Emulation and Fuzzing with LibAFL QEMU" https://t.co/6cYo6nj32r

— SinSinology (@SinSinology) December 30, 2025


Extracts information from radio signals through SDR deviceshttps://t.co/U5PiEmTnej pic.twitter.com/AZPP5uln0w

— Tom Dörr (@tom_doerr) December 30, 2025


📡 A super useful free tool for mapping mobile network coverage

If you ever wanted to see where 2G/3G/4G/5G towers are located for any operator, this tool makes it surprisingly easy and it’s completely FREE.

It’s called CellMapper

It uses crowdsourced data to map:
✅ Mobile… pic.twitter.com/TLPBu1uklt

— CyberSudo (@Cyber_Sudo) December 30, 2025


My last #39c3 talk made it to @hackaday!

I talked about how we recreated the Roland JP-8000 by reverse engineering the custom silicon it used and emulating all the chips.https://t.co/94dgZmV5fT

— Giulio Zausa (@giuliozausa) December 30, 2025


🛜 No cameras needed for motion detection! 👻

This open-source project called ESPectre lets you detect movement using just Wi-Fi signals!

All you need:
✅ $10 ESP32 device
✅ 15 minutes to set up
✅ Zero programming skills

Works through walls, integrates with Home Assistant,… pic.twitter.com/toRa3wDye4

— DFRobot (@dfrobotcn) December 30, 2025


The DNG bug is giving major #LogoFAIL vibes. It’s essentially the same story: one legacy vulnerability (Adobe dng_sdk) rippling across multiple vendors and products.

How many more of these legacy bugs are still lurking in our software supply chain? https://t.co/VAUnGmCqg2

— Alex Matrosov (@matrosov) December 30, 2025


Glitches in games, especially used for speedrunning, are one of the most fun aspects of hacking to watch!

As an example, check out this video "How Speedrunners BEAT Hollow Knight Silksong In 10 Minutes!" by @Abyssoft https://t.co/JihLlxQwRY

— Gynvael Coldwind (@gynvael) December 30, 2025


Don't miss what's next. Subscribe to the grugq's newsletter:

Add a comment:

Share this email:
Share on Twitter Share on Hacker News Share via email Share on Mastodon Share on Bluesky
Twitter